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(54) HIGH RELIABILITY SYSTEM 

(57)Abstract: 

PROBLEM TO BE SOLVED: To suitably deal with fault 
occurrence when employing a mirror ring configuration 
with the disk of an active system node as an original and 
the disk of a reserve system node, which is connected 
through a network, as a shadow. 
SOLUTION: When a fault occurs on the disk of the 
active system node, a node operated as a reverse 
system is turned into active state and the node operated 
up to the moment as an active system is stopped so that 
processing can be executed to stop operation as a 
duplex system. Besides, when a fault occurs on the disk 
of the reserve system node, the node operated as a 
reserve system is stopped so that processing can be 
executed to stop operation as a duplex system. Besides, 
when a fault occurs on a network prepared for access to a shadow disk, the node operated as 
a reserve system is stopped so that processing can be executed to stop operation as a duplex 
system. 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

LThis document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 



CLAIMS 



[Claim(s)] 

[Claim 1] It has the mirror set function which uses the local disk of a system node as an original disk, 
and uses as a shadow disk the local disk of a standby system node connected through a network, present 
~ business In the high reliability system which carries out business by using the disk which is normal, 
and which is already one side when a failure occurs on one of disks When a means to detect whether it is 
that the failure occurred on the above-mentioned original disk, and failure generating of the above- 
mentioned original disk are detected it corresponds to the means which changes a standby system node 
to an employment condition, and the above-mentioned node change - making - till then - present - 
business - the high reliability system characterized by having a means to stop duplex system by 
stopping the node which was operating as a system node. 

[Claim 2] It has the mirror set function which uses the local disk of a system node as an original disk, 
and uses as a shadow disk the local disk of a standby system node connected through a network, present 

- business - In the high reliability system which carries out business by using the disk which is normal, 
and which is already one side when a failure occurs on one of disks The high reliability system 
characterized by having a means to detect whether it is that the failure occurred on the above-mentioned 
shadow disk, and a means to stop duplex system by stopping a standby node when failure generating of 
the above-mentioned shadow disk is detected. 

[Claim 3] It has the mirror set function which uses the local disk of a system node as an original disk, 
and uses as a shadow disk the local disk of a standby system node connected through a network, present 

- business - In the high reliability system which carries out business by using the disk which is normal, 
and which is already one side when a failure occurs on one of disks present — business, when a means to 
detect whether it is that the failure occurred to the network for shadows prepared in order that a system 
node may access the above-mentioned shadow disk, and failure generating of the above-mentioned 
network for shadows are detected The high reliability system characterized by having a means to stop 
duplex system by stopping a standby node. 



[Translation done.] 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1. This document has been translated by computer. So the translation may not reflect the original 
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3. In the drawings, any words are not translated. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] this invention - present - business -- it is normal, when it has the mirror set 
function which uses the local disk of a system node as an original disk, and uses as a shadow disk the 
local disk of a standby system node connected through a network and a failure occurs on one of disks - 
already - while is related with the high reliability system which enables it to cope with it suitable for 
failure generating especially about the high reliability system which carries out business by using a disk. 

[0002] 

[Description of the Prior Art] The high reliability system which consists of a server which performs 
business, and a server which stands by in preparation for the failure of the server is used widely, the 
former - present ~ business - it is called a system node and the latter is called the standby system node. 

[0003] present - business - when a system node is downed according to a certain failure, a standby 
system node takes over business, in order to take over this business - operating data - present - 
business - it is necessary to take over to a standby system node from a system node 
[0004] a this taking over of former and operating data sake present - business - the configuration of 
preparing the common disk unit connected with a SCSI interface etc. between a system node and a 
standby system node was taken. 

[0005] However, a common disk unit is very expensive, then - present - business it is normal, when 
it has the mirror set function (function of RAID 1) which uses the local disk of a system node as an 
original disk, and uses as a shadow disk the local disk of a standby system node connected through a 
network and a failure occurs on one of disks - already ~ the high reliability system which takes the 
configuration of carrying out business by using a disk is being used for while. 
[0006] this high reliability system shows to drawing 5 - as ~ present - business - when writing 
operating data in an original disk, a system node is writing that operating data in a shadow disk using a 
network disk driver, and has taken the configuration of performing mirroring. 

[0007] and - present - business -- the system node has taken the configuration of carrying out business 
by accessing a shadow disk using a network disk driver, when business is carried out by accessing an 
original disk when an original disk is normal and a failure occurs on an original disk. 
[0008] 

[Problem(s) to be Solved by the Invention] However, there are the following troubles in this 
conventional technique. 

[0009] namely, the time of a failure occurring on an original disk - present - business ~ since a system 
node performs I/O of operating data to a shadow disk altogether, the entry-of-data engine performance 
falls and it has the trouble that system-wide degradation occurs [ this ] to accumulate. 
[0010] Moreover, when a failure occurs on a shadow disk, the configuration of stopping a standby 
system node is not taken with this conventional technique. 
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[001 1] after a failure occurs on a shadow disk from now on - present — business — the time of the 
system node carrying out business using the original disk - present — business ~ if it happens that a 
system node carries out a system down, as for a user, business should be taken over to a standby system 
node it is that come out, and it is not performed although it is, and there is a trouble of having anxiety 
to the dependability of a system. 

[0012] and ~ this - present - business — since the operating data of that shadow disk are not updated 
even if it may become possible to use a shadow disk by avoiding a failure part in the case of the system 
down of a system node, a ****** system node (node with that shadow disk) also has the trouble that the 
newest operating data cannot be succeeded. 

[0013] moreover — present — business -- also when a failure occurs to the network (exclusive network of 
drawing 5 ) prepared in order that a system node may access a shadow disk, the configuration of 
stopping a standby system node is not taken with this conventional technique. 

[0014] From now on, a trouble in case a failure occurs, and the same trouble will be in a shadow disk. 
[0015] The local disk of a system node is used as an original disk, this invention is made in view of this 
situation — having - present — business — It has the mirror set function which uses as a shadow disk the 
local disk of a standby system node connected through a network. When a failure occurs on one of 
disks, it is, when taking the configuration of carrying out business by using the disk which is normal and 
which is already one side, and aims at offer of the new high reliability system which enables it to cope 
with it suitable for failure generating. 
[0016] 

[Means for Solving the Problem] In order to attain this purpose, the high reliability system of this 
invention It has the mirror set function which uses the 4o6al r disk of : ¥ system node as r an original disk, 
and usesa^ a shadow disk the docal disk of a standby system-node connected through^ a network; present 
— business - When a failure occurs on one of disks and the configuration of carrying out business by 
using normal another disk is taken When failure generating of an original disk is detected by a detection 
means to detect whether it is that the failure occurred on the original disk, and the detection means it 
corresponds to the node change by the change means which changes a standby system node to an 
employment condition, and the change means -- making - till then present - business — it constitutes 
so that it may have the means for stopping which stops duplex system by stopping the node which was 
operating as a system node. 

[0017] thus -- the high reliability system of this invention constituted - present - business - if a failure 
occurs in the hard disk of the node which is operating as a system, while changing into an employment 
condition the node which is operating as a standby system — till then - present - business - by stopping 
the node which was operating as a system, it processes so that the actuation as duplex system may be 
stopped. 

[0018] Since the node which newly performs operating processing by this can carry out business using 
the hard disk of a self-node, it is lost that the entry-of-data engine performance deteriorates of it, and it 
can prevent system-wide degradation. And inconvenient actuation is not performed after that from 
suspending the actuation as duplex system. 

[0019] In order to attain this purpose, moreover, the high reliability system of this invention It has the 
mirror set function which uses the local disk of a system node as an original disk, and uses as a shadow 
disk the local disk of a standby system node connected through a network, present — business — When a 
failure occurs on one of disks and the configuration of carrying out business by using normal another 
disk is taken It constitutes so that it may have a detection means to detect whether it is that the failure 
occurred on the shadow disk, and the means for stopping which stops duplex system by stopping a 
standby node when failure generating of a shadow disk is detected by the detection means. 
[0020] Thus, with the high reliability system of this invention constituted, if a failure occurs in the hard 
disk of the node which is operating as a standby system, it will process by stopping the node which is 
operating as a standby system, so that the actuation as duplex system may be stopped. 
[0021] Thereby, the node which performs operating processing is being able to tell a user now about the 
standby system node not being prepared, and while it is lost that a user has anxiety to the dependability 
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of a system, it does not happen un-arranging [ that business will be succeeded as old operating data are 
also ], either. 

[0022] In order to attain this purpose, moreover, the high reliability system of this invention It has the 
mirror set function which uses the local disk of a system node as an original disk, and uses as a shadow 
disk the local disk of a standby system node connected through a network, present « business - When a 
failure occurs on one of disks and the configuration of carrying out business by using normal another 
disk is taken present — business, when failure generating of the network for shadows is detected by a 
detection means to detect whether it is that the failure occurred to the network for shadows prepared in 
order that a system node may access a shadow disk, and the detection means It constitutes so that it may 
have the means for stopping which stops duplex system by stopping a standby node. 
[0023] Thus, with the high reliability system of this invention constituted, if a failure occurs to the 
network for shadows, it will process by stopping the node which is operating as a standby system, so 
that the actuation as duplex system may be stopped. 

[0024] Thereby, the node which performs operating processing is being able to tell a user now about the 
standby system node not being prepared, and while it is lost that a user has anxiety to the dependability 
of a system, it does not happen un-arranging [ that business will be succeeded as old operating data are 
also ], either. 

[0025] thus - according to this invention — present - business - it is normal, when it has the mirror set 
function which uses the local disk of a system node as an original disk, and uses as a shadow disk the 
local disk of a standby system node connected through a network and a failure occurs on one of disks - 
already - it is, when taking the configuration of carrying out business by using a disk, and while can 
cope with it now suitable for failure generating. 
[0026] 

[Embodiment of the Invention] Hereafter, this invention is explained to a detail according to the gestalt 
of operation. 

[0027] The system configuration of the high reliability system with which this invention is applied to 
drawing 1 is illustrated. 

[0028] As shown in this drawing, the high reliability system with which this invention is applied 
operating processing is performed — present — business -- the system node 1 ~ present - business -- 
with the standby system node 2 prepared as a standby system of the system node 1 present - business - 
the exclusive network 3 which connects between the system node 1 and the standby system nodes 2, and 
the business-use terminal 4 which a user operates - present - business, while connecting between the 
system node 1 and the standby system nodes 2 present - business — it consists of business-use networks 
5 which connect between the system node 1/the standby system node 2, and the business-use terminals 
4. 

[0029] here - the exclusive network 3 - present — business — while being used as communication link 
Rhine in case the system node 1 accesses the hard disk of the standby system node 2 - present 
business - it is used as communication link Rhine of the notice of survival exchanged between the 
system node 1 and the standby system node 2, and has doubled preferably. 

[0030] this - present - business ~ the system node 1 is equipped with the hard disk 10 which functions 
as an original disk of mirroring, the application program 1 1 which performs operating processing using 
a hard disk 10, the network disk driver 12 for accessing the hard disk 20 of the standby system node 2, 
the mirror driver 13 which performs mirroring to hard disks 10 and 20, and the cluster control section 14 
which performs the whole control processing. 

[0031] the hard disk 20 on which this standby system node 2 functions as a shadow disk of mirroring on 
the other hand — present — business » the application program 21 prepared for the application program 
1 1 of the system node 1 by matching - present business - it has the network disk driver 22 for 
accessing the hard disk 10 of the system node 1, the mirror driver 23 which performs mirroring to hard 
disks 20 and 10, and the cluster control section 24 which performs the whole control processing. 
[0032] drawing 2 - present - business - the example of 1 operation gestalt of this invention which 
functions when a failure occurs in the hard disk 10 of the system node 1 is illustrated. 



http://www4. ipdl. ncipi. go. jp/cgi-bin/tranjveb_cgi_ej je 



9/7/06 



JP, 2002-123406, A [DETAILED DESCRIPTION] 



Page 4 of 6 



[0033] here - the inside of drawing - present — business - the system node 1 - "the # node 1" and the 

standby system node 2 - "the # node 2" - present -- business - "HD2" shows the hard disk 20 of 

"HDl" and the standby system node 2 for the hard disk 10 of the system node 1 . 

[0034] next, this drawing -- following - present - business ~ when a failure occurs in the hard disk 10 

of the system node 1, the processing which this invention performs is explained. 

[0035] (1) present — business - suppose that a certain failure occurred in the hard disk 10 of the system 

node 1. 

[0036] (2) the time of this failure having occurred — present business, if the write-in demand of 
operating data is published that the application program 1 1 of the system node 1 should carry out 
operating processing (3) — present — business — the mirror driver 13 of the system node 1 While writing 
in the operating data which have a write-in demand in the hard disk 10 of a self-node that mirroring 
should be performed, the operating data which have a write-in demand in the hard disk 20 of the standby 
system node 2 using the network disk driver 12 will be written in. this time — present — business — the 
mirror driver 13 of the system node 1 is being unable to perform this writing to the hard disk 10 of a 
self-node, and detects that the failure has occurred in the hard disk 10 of a self-node. 
[0037] (4) present - business ~ the mirror driver 13 of the system node 1 will notify that to the cluster 
control section 14 of a self-node, if it detects that the failure has occurred in the hard disk 10 of a self- 
node. 

[0038] (5) present — business — if this notice is received, since the application program 1 1 of (6) self- 
node is stopped, the cluster control section 14 of the system node 1 will change a self-node from an 
employment condition to a idle state - making - (7) - after it, it is stopping the mirror driver 13 of a 
self-node, and stop the actuation as duplex system. 

[0039] (8) then - present - business — the actuation as a system was suspended - present - business - 

the cluster control section 14 of the system node 1 notifies a change in the employment condition to the 

cluster control section 24 of the standby system node 2 using the business-use network 5. 

[0040] (9) if this notice is received, the cluster control section 24 of the standby system node 2 will 

change a self-node in the employment condition from a idle state — making — (10) - while starting the 

mirror driver 23 of a self-node after it, resume business by starting the application program 21 of (1 1) 

self-node. 

[0041] Here, when starting the mirror driver 23, only the hard disk 20 of a self-node is made accessible, 
and processing which changes the configuration information of mirroring is performed about the hard 
disk 10 which the failure generated to make it not access. 

[0042] thus - this invention - present - business - if a failure occurs in the hard disk of the node which 
is operating as a system, while changing into an employment condition the node which is operating as a 
standby system ~ till then — present business ~ by stopping the node which was operating as a 
system, it processes so that the actuation as duplex system may be stopped. 

[0043] Since the node which newly performs operating processing by this can carry out business using 
the hard disk of a self-node, it is lost that the entry-of-data engine performance deteriorates of it, and it 
can prevent system-wide degradation. And inconvenient actuation is not performed after that from 
suspending the actuation as duplex system. 

[0044] The example of 1 operation gestalt of this invention which functions on drawing 3 when a failure 
occurs in the hard disk 20 of the standby system node 2 is illustrated. 

[0045] here - the inside of drawing - present ~ business - the system node 1 - "the # node 1" and the 
standby system node 2 - "the # node 2" - present ~ business - "HD2" shows the hard disk 20 of 
"HDl" and the standby system node 2 for the hard disk 10 of the system node 1. 
[0046] Next, when a failure occurs in the hard disk 20 of the standby system node 2 according to this 
drawing, the processing which this invention performs is explained. 

[0047] (1) Suppose that a certain failure occurred in the hard disk 20 of the standby system node 2. 
[0048] (2) the time of this failure having occurred — present ~ business, if the write-in demand of 
operating data is published that the application program 1 1 of the system node 1 should carry out 
operating processing (3) - present - business - the mirror driver 13 of the system node 1 While writing 
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in the operating data which have a write-in demand in the hard disk 10 of a self-node that mirroring 
should be performed, the operating data which have a write-in demand in the hard disk 20 of the standby 
system node 2 using the network disk driver 12 will be written in. this time — present — business - the 
mirror driver 13 of the system node 1 is being unable to perform this writing to the hard disk 20 of the 
standby system node 2, and detects that the failure has occurred in the hard disk 20 of the standby 
system node 2. 

[0049] (4) present - business — the mirror driver 13 of the system node 1 will notify that to the cluster 
control section 14 of a self-node, if it detects that the failure occurred in the hard disk 20 of the standby 
system node 2. 

[0050] (5) if this notice is received - present - business - the cluster control section 14 of the system 
node 1 - the business-use network 5 - using ~ the cluster control section 24 of the standby system node 
2 ~ receiving cut-off processing - notifying - (6) - in response, the cluster control section 24 of the 
standby system node 2 is making it change from a standby condition to a idle state, and stops the 
actuation as duplex system. 

[0051] Thus, by this invention, if a failure occurs in the hard disk of the node which is operating as a 
standby system, it will process by stopping the node which is operating as a standby system, so that the 
actuation as duplex system may be stopped. 

[0052] Thereby, the node which performs operating processing is being able to tell a user now about the 
standby system node not being prepared, and while it is lost that a user has anxiety to the dependability 
of a system, it does not happen un-arranging [ that business will be succeeded as old operating data are 
also ], either. 

[0053] The example of 1 operation gestalt of this invention which functions on drawing 4 when a failure 
occurs to the exclusive network 3 is illustrated. 

[0054] here - the inside of drawing ~ present - business - the system node 1 - "the # node 1" and the 
standby system node 2 - "the # node 2" - present ~ business - "HD2" shows the hard disk 20 of 
"HD1" and the standby system node 2 for the hard disk 10 of the system node 1. 
[0055] Next, when a failure occurs to the exclusive network 3 according to this drawing, the processing 
which this invention performs is explained. 

[0056] (1) Suppose that a certain failure occurred to the exclusive network 3. 
[0057] (2) the time of this failure having occurred ~ present - business, if the write-in demand of 
operating data is published that the application program 1 1 of the system node 1 should carry out 
operating processing (3) - present - business ~ the mirror driver 13 of the system node 1 While writing 
in the operating data which have a write-in demand in the hard disk 10 of a self-node that mirroring 
should be performed, the operating data which have a write-in demand in the hard disk 20 of the standby 
system node 2 using the network disk driver 12 will be written in. this time - present - business - the 
mirror driver 13 of the system node 1 is being unable to perform this writing to the hard disk 20 of the 
standby system node 2, and detects that the failure has occurred to the exclusive network 3. 
[0058] (4) present - business - the mirror driver 13 of the system node 1 will notify that to the cluster 
control section 14 of a self-node, if it detects that the failure occurred to the exclusive network 3. 
[0059] (5) if this notice is received - present - business ~ the cluster control section 14 of the system 
node 1 This is received, the business-use network 5 - using - the cluster control section 24 of the 
standby system node 2 - receiving - cut-off processing - notifying - (6) - the cluster control section 
24 of the standby system node 2 While making it change from a standby condition to a idle state, the 
actuation as duplex system is stopped by directing to separate the hard disk 20 of a self-node from a 
mirror set to the mirror driver 23 of (7) self-node. 

[0060] (8) And if these directions are received, the mirror driver 23 will be updating the configuration 

information of the mirror set memorized by the hard disk 20 of a self-node in the form which this hard 

disk's 20 cannot use, and will separate the hard disk 20 of a self-node from a mirror set. 

[0061] Thus, by this invention, if a failure occurs to the exclusive network 3, it will process by stopping 

the node which is operating as a standby system, so that the actuation as duplex system may be 

suspended. 
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[0062] Thereby, the node which performs operating processing is being able to tell a user now about the 
standby system node not being prepared, and while it is lost that a user has anxiety to the dependability 
of a system, it does not happen un-arranging [ that business will be succeeded as old operating data are 
also ], either. 
[0063] 

[Effect of the Invention] it explained above as - the high reliability system of this invention — present 
- business - if a failure occurs in the hard disk of the node which is operating as a system, while 
changing into an employment condition the node which is operating as a standby system - till then — 
present - business - by stopping the node which was operating as a system, it processes so that the 
actuation as duplex system may be stopped. 

[0064] Since the node which newly performs operating processing by this can carry out business using 
the hard disk which a self-node has, it is lost that the entry-of-data engine performance deteriorates of it, 
and it can prevent system-wide degradation. And inconvenient actuation is not performed after that from 
suspending the actuation as duplex system. 

[0065] Moreover, with the high reliability system of this invention, if a failure occurs in the hard disk of 
the node which is operating as a standby system, it will process by stopping the node which is operating 
as a standby system, so that the actuation as duplex system may be stopped. 

[0066] Thereby, the node which performs operating processing is being able to tell a user now about the 
standby system node not being prepared, and while it is lost that a user has anxiety to the dependability 
of a system, it does not happen un-arranging [ that business will be succeeded as old operating data are 
also ], either. 

[0067] Moreover, with the high reliability system of this invention, if a failure occurs to the network for 
shadows prepared for access of a shadow disk, it will process by stopping the node which is operating as 
a standby system, so that the actuation as duplex system may be stopped. 

[0068] Thereby, the node which performs operating processing is being able to tell a user now about the 
standby system node not being prepared, and while it is lost that a user has anxiety to the dependability 
of a system, it does not happen un-arranging [ that business will be succeeded as old operating data are 
also ], either. 

[0069] thus — according to this invention - present - business - it is normal, when it has the mirror set 
function which uses the local disk of a system node as an original disk, and uses as a shadow disk the 
local disk of a standby system node connected through a network and a failure occurs on one of disks - 
already ~ it is, when taking the configuration of carrying out business by using a disk, and while can 
cope with it now suitable for failure generating. 
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* NOTICES * 

JPO and NCIPI are not responsible for any 
damages caused by the use of this translation. 

1 .This document has been translated by computer. So the translation may not reflect the original 
precisely. 

2.**** shows the word which can not be translated. 
3. In the drawings, any words are not translated. 

DESCRIPTION OF DRAWINGS 
[Brief Description of the Drawings] 

[Drawing 1] It is the system configuration Fig. of the high reliability system with which this invention is 
applied. 

[Drawing 2] It is the example of 1 operation gestalt of this invention. 
[Drawing 3] It is the example of 1 operation gestalt of this invention. 
[Drawing 4] It is the example of 1 operation gestalt of this invention. 

[Drawing 5] It is the explanatory view of the high reliability system with which this invention is applied. 

[Description of Notations] 

1 Present - Business - System Node 

2 Standby System Node 

3 Exclusive Network 

4 Business-use Terminal 

5 Business-use Network 
10 20 Hard disk 

1121 Application program 

1 2 22 Network disk driver 

13 23 Mirror driver 

14 24 Cluster control section 
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